$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: toR+7a3z0OIOgN4OGSY9Xocjc3OFy69ohc51xukl4FI= Subject key identifier: E9:B9:E1:EF:C1:CA:89:1E:C8:2D:04:A3:57:9A:F2:40:85:80:A7:8E Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0A5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0A52 Signing time: Wed 02 Jul 2025 19:55:38 +0000 Manifest this update: Wed 02 Jul 2025 19:55:37 +0000 Manifest next update: Wed 09 Jul 2025 19:55:37 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: blXeg1zsuAciabI8e+Hey/9Z/cm3H8FfiZEvmlsaLpU=) 2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: KPuYYAQ14XpM20WTZh+zfqEqRXqFeAhCtZEHNEUGMw8=) 3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: sDoqH+F903pEZfTL5CZCahrin5P/dPEPc5OIr03Af9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2651 (0xa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Jul 2 19:55:37 2025 GMT Not After : Jul 9 19:55:37 2025 GMT Subject: CN=68658eba-d0c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:d8:c1:36:5b:b1:2b:fb:ad:09:a2:52:d2: c2:30:4a:a3:ae:a9:e5:67:26:75:91:96:75:1a:9e: e4:b0:19:5f:a8:97:eb:43:a6:44:bc:03:72:16:2a: 2b:c1:03:8b:b9:fb:06:51:6a:e5:9e:e3:27:42:09: 80:92:18:19:e8:05:af:36:3f:e1:01:67:27:6f:ec: 10:dc:f8:9b:16:19:60:13:f4:67:cf:b6:83:d2:2a: e3:2b:9f:d8:f2:73:9a:e4:fa:85:b4:81:07:68:ff: 8e:72:57:b5:97:76:61:dc:9b:45:23:b3:72:fb:3e: 86:77:1a:8f:20:67:f4:ca:90:c1:e1:97:4e:36:2c: 88:9b:20:c4:fd:17:d6:f2:ff:6e:7e:02:74:17:7c: bc:30:ba:4d:13:69:e8:d4:83:f5:9b:ad:c5:c7:72: 71:23:f0:15:22:c4:4a:25:ec:ad:3f:7f:ed:65:b5: 66:1e:8f:e1:8e:05:e9:88:d4:0f:65:93:27:1c:96: 0c:3c:2b:75:12:0a:53:92:21:b4:55:21:2a:47:e5: 06:d1:7c:a0:60:49:d1:67:11:9b:93:4d:da:c7:eb: 74:a5:4e:33:0d:70:69:1e:b6:8a:d0:01:86:43:fe: 06:e0:4d:3e:82:f6:46:d5:d0:5e:2b:4f:90:5f:63: d7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B9:E1:EF:C1:CA:89:1E:C8:2D:04:A3:57:9A:F2:40:85:80:A7:8E X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c3:42:d4:79:ec:2c:11:9d:89:0d:e3:c0:3b:02:6b:f8:62: 78:b9:3e:3a:0f:66:bd:1f:54:e0:65:ed:e0:d1:c5:01:0c:eb: c3:38:06:e7:45:2f:ad:52:90:ab:17:25:91:d0:02:28:0b:ae: 3e:c2:9b:6f:31:f0:b8:61:64:17:1b:cc:80:02:c5:9d:29:83: c5:a4:fd:fa:66:d6:44:4f:35:78:67:ab:fa:50:41:74:d9:fa: 91:d2:55:e1:cd:0c:13:a1:20:27:1f:df:cb:59:cd:23:31:2c: 06:e5:f0:63:2e:80:a6:f8:98:11:f0:1d:b7:75:73:ab:c0:64: 8f:5e:a9:34:68:40:f7:44:5f:d6:fd:49:aa:5f:eb:9d:38:56: 20:5e:f9:42:36:69:12:27:2f:94:1e:f0:c6:5d:5c:f8:b0:88: b6:74:9a:a2:5b:80:ff:f9:a8:05:0b:7a:91:a1:5f:0e:18:6e: 9e:82:3e:58:12:53:69:f8:95:a3:0f:67:93:e8:71:7c:ba:92: a7:81:fe:92:63:ff:31:62:90:90:52:72:0b:89:0d:e1:9e:5e: a8:07:82:58:a9:b0:01:0f:8c:84:85:79:4c:92:11:9b:8b:ad: cf:f3:9c:5d:d9:dc:fb:39:19:0f:dc:9b:81:a7:4d:4e:1d:ee: 2b:17:bd:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjUwNzAyMTk1NTM3WhcNMjUwNzA5MTk1NTM3WjAYMRYwFAYD VQQDEw02ODY1OGViYS1kMGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0nYwTZbsSv7rQmiUtLCMEqjrqnlZyZ1kZZ1Gp7ksBlfqJfrQ6ZEvANyFior wQOLufsGUWrlnuMnQgmAkhgZ6AWvNj/hAWcnb+wQ3PibFhlgE/Rnz7aD0irjK5/Y 8nOa5PqFtIEHaP+Ocle1l3Zh3JtFI7Ny+z6GdxqPIGf0ypDB4ZdONiyImyDE/RfW 8v9ufgJ0F3y8MLpNE2no1IP1m63Fx3JxI/AVIsRKJeytP3/tZbVmHo/hjgXpiNQP ZZMnHJYMPCt1EgpTkiG0VSEqR+UG0XygYEnRZxGbk03ax+t0pU4zDXBpHraK0AGG Q/4G4E0+gvZG1dBeK0+QX2PX4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm54e/B yokeyC0Eo1ea8kCFgKeOMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+w0LUeewsEZ2JDePAOwJr+GJ4uT46D2a9H1TgZe3g0cUBDOvDOAbn RS+tUpCrFyWR0AIoC64+wptvMfC4YWQXG8yAAsWdKYPFpP36ZtZETzV4Z6v6UEF0 2fqR0lXhzQwToSAnH9/LWc0jMSwG5fBjLoCm+JgR8B23dXOrwGSPXqk0aED3RF/W /UmqX+udOFYgXvlCNmkSJy+UHvDGXVz4sIi2dJqiW4D/+agFC3qRoV8OGG6egj5Y ElNp+JWjD2eT6HF8upKngf6SY/8xYpCQUnILiQ3hnl6oB4JYqbABD4yEhXlMkhGb i63P85xd2dz7ORkP3JuBp01OHe4rF72c -----END CERTIFICATE-----Generated at Thu Jul 3 09:10:19 2025 by rpki-client